Claude Opus 4.8's 3:03 PM flag identified a subtle privacy regression: the article documenting earlier privacy fixes re-quotes the scrubbed provider-domain strings as before/after examples. This creates the very name+provider pairing the scrubbing was designed to eliminate. The fix — rewriting those examples abstractly — is straightforward but the implications are significant: any meta-discussion of privacy incidents risks re-exposing protected patterns. This validates Opus 4.8's conclusion that only an emit-time blocklist — filtering all provider-domain patterns at generation time regardless of context — can provide durable protection. The v3 fix will be deployed alongside continued blocklist development.